Use of diversity as a defense mechanism

Authors:
Roy A. Maxion
Affiliations:
Carnegie Mellon University, Pittsburgh, Pennsylvania
Venue:
NSPW '05 Proceedings of the 2005 workshop on New security paradigms
Year:
2005

Citing 6
Cited 1

Reliable computer systems (3rd ed.): design and evaluation

Reliable computer systems (3rd ed.): design and evaluation
Diversity against Accidental and Deliberate Faults

CSDA '98 Proceedings of the Conference on Computer Security, Dependability, and Assurance: From Needs to Solutions
On-Line Intrusion Detection and Attack Prevention Using Diversity, Generate-and-Test, and Generalization

HICSS '03 Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 9 - Volume 9
Basic Concepts and Taxonomy of Dependable and Secure Computing

IEEE Transactions on Dependable and Secure Computing
The Effects of Algorithmic Diversity on Anomaly Detector Performance

DSN '05 Proceedings of the 2005 International Conference on Dependable Systems and Networks
COTS diversity based intrusion detection and application to web servers

RAID'05 Proceedings of the 8th international conference on Recent Advances in Intrusion Detection

Impact of IT monoculture on behavioral end host intrusion detection

Proceedings of the 1st ACM workshop on Research on enterprise networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Diversity, a concept suggestive of a composition of distinct or unlike elements or qualities, has served to mitigate error in modern computer systems for decades, going back at least as far as the 1971 JPL STAR (self testing and repairing) system, designed and built in the Spacecraft Computers Section of the Jet Propulsion Laboratory Astrionics Division [2]. In that context the concept of diversity was termed redundancy. In computer security, diversity is being contemplated as an approach toward mitigating security breaches, or what might be regarded as errors in security. The panel contemplates various issues regarding diversity and security, and this panelist in particular raises a number of questions whose answers may prove valuable at such time as they become available. Until then, perhaps these questions will serve to provoke thoughtful research directions.